Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6/3a2e2ee3-ef73-3a0a-9029-6e6ec007d5d9.roa
File:                     3a2e2ee3-ef73-3a0a-9029-6e6ec007d5d9.roa (raw, json)
Hash identifier:          kRb8wpsTyPvaFtXSfnY71wTgiw3MWhId1l7OynA6OA0=
Subject key identifier:   3E:BB:CD:F6:7C:39:37:44:D5:67:7D:E6:72:DE:9A:0D:9B:17:53:F1
Certificate issuer:       /CN=ed1c116b-b42c-4d90-ac66-1ef8075303d6
Certificate serial:       010D0C9F4328584E7D2F80D1B12EEB504F423A60
Authority key identifier: D4:EB:D8:25:07:E3:73:BD:26:AA:78:E8:41:70:E7:A7:AA:F0:0C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6/3a2e2ee3-ef73-3a0a-9029-6e6ec007d5d9.roa
Signing time:             Mon 13 Jul 2026 21:00:12 +0000
ROA not before:           Mon 13 Jul 2026 21:00:12 +0000
ROA not after:            Sun 11 Oct 2026 21:00:12 +0000
asID:                     18859
IP address blocks:        64.250.0.0/20 maxlen: 20
                          68.235.160.0/20 maxlen: 20
                          70.40.16.0/20 maxlen: 20
                          162.222.244.0/22 maxlen: 22
                          198.46.12.0/22 maxlen: 22
                          204.154.124.0/22 maxlen: 22
                          216.45.64.0/19 maxlen: 19
                          216.82.128.0/19 maxlen: 19
                          2604:af80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6/ed1c116b-b42c-4d90-ac66-1ef8075303d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6/ed1c116b-b42c-4d90-ac66-1ef8075303d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7d:2f:80:d1:b1:2e:eb:50:4f:42:3a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed1c116b-b42c-4d90-ac66-1ef8075303d6
        Validity
            Not Before: Jul 13 21:00:12 2026 GMT
            Not After : Oct 11 21:00:12 2026 GMT
        Subject: CN=9bb8fdf2-9ed3-40a9-9c6d-12802e3c6e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e5:9c:6d:8e:c5:d7:38:95:b0:91:33:c3:d9:
                    a1:d4:bf:59:df:15:f9:57:05:d3:cb:55:16:fe:6d:
                    73:5f:ad:13:bf:74:c4:dd:d4:41:93:f8:b4:44:8e:
                    aa:e8:10:55:27:8c:7e:7b:17:f7:ee:e7:bb:ab:34:
                    68:56:91:0c:b4:bf:90:70:3d:6d:16:1a:a4:7f:1e:
                    22:1d:9a:27:0c:5c:7c:93:14:c6:9f:01:8a:9c:2e:
                    41:94:2c:86:b4:5f:02:ae:40:5d:44:0a:f0:31:fc:
                    01:9d:e6:b4:6e:8a:41:ba:65:21:6a:c2:e1:61:ff:
                    ef:65:cb:49:31:3e:f5:65:1b:51:e3:3d:4d:33:69:
                    52:e5:c4:b8:1e:91:fd:53:04:d3:13:81:2a:9f:83:
                    42:4f:58:3d:4b:0d:8e:90:71:64:a0:f8:46:83:7e:
                    9b:87:3c:13:96:9f:e9:84:1f:73:88:fb:87:d6:57:
                    3d:f7:47:73:fa:7f:98:18:d1:81:db:8c:04:f9:31:
                    ba:28:ea:43:ea:25:e9:90:b5:dc:a5:82:b0:02:e5:
                    92:f8:67:8f:74:17:e3:35:c6:90:74:22:ae:cb:79:
                    64:ce:82:e5:ed:96:55:65:7c:3f:85:84:3b:38:75:
                    7b:62:17:94:f2:0e:1c:05:16:15:31:0f:a6:db:76:
                    dc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:BB:CD:F6:7C:39:37:44:D5:67:7D:E6:72:DE:9A:0D:9B:17:53:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6/3a2e2ee3-ef73-3a0a-9029-6e6ec007d5d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6/ed1c116b-b42c-4d90-ac66-1ef8075303d6.crl

            X509v3 Authority Key Identifier:
                keyid:D4:EB:D8:25:07:E3:73:BD:26:AA:78:E8:41:70:E7:A7:AA:F0:0C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.250.0.0/20
                  68.235.160.0/20
                  70.40.16.0/20
                  162.222.244.0/22
                  198.46.12.0/22
                  204.154.124.0/22
                  216.45.64.0/19
                  216.82.128.0/19
                IPv6:
                  2604:af80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:79:b9:90:3d:67:0f:3a:11:b7:8a:0a:de:5d:41:0e:bd:77:
         81:6a:d1:31:a1:a7:db:be:fb:6f:67:38:9d:82:2f:d3:2e:d5:
         34:d6:86:b1:e7:4e:b5:d6:97:97:07:de:4f:b8:16:15:98:8f:
         1c:f6:41:e8:9f:67:7b:b9:20:6a:f4:60:d6:0a:24:bf:c8:63:
         f9:e3:c6:15:ff:cd:39:42:98:14:19:62:e1:1d:6b:d1:f9:03:
         16:04:64:32:8b:d3:36:5f:98:1f:d7:b7:18:dd:8c:c2:61:18:
         a5:af:af:66:77:e8:59:53:1c:b4:ac:af:f3:83:ed:3e:f0:b0:
         1f:89:aa:bf:f7:a3:4d:8f:b8:e7:c1:a9:87:bd:d5:5c:f2:74:
         9f:79:17:9d:be:fa:fc:95:32:92:80:6e:81:dd:5e:f3:22:8a:
         13:b0:bd:24:0d:3a:a3:09:83:03:3a:e4:2f:d2:15:c2:73:f4:
         c3:a2:d7:b7:5f:ad:52:ec:8a:c0:05:d3:e1:8c:3b:f4:a6:7e:
         00:53:1f:3c:9c:d3:e4:7d:64:d8:48:d1:0e:ab:83:44:33:34:
         4c:ca:bb:18:21:a3:d0:b1:7e:1f:0f:74:8b:83:fd:22:17:9b:
         a5:63:12:f4:2d:6d:d1:97:61:32:48:32:6c:43:e5:1d:83:e4:
         81:9e:f6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:20:04 2026 by rpki-client